Things like SpiderFoot or WireShark are actually publically available and not Mil-spec only items. SpiderFoot is open source for example.
Any one with a Network+ or Security+ cert would know how to do these basics such as using those programs or utilizing tracerts.
Doesn't mean that the information provided was not powerful and damning, but there's no reason to over hype it.
If anything, the teams using common tools actually adds to the veracity of their claims as they're doing things you or I can use on our own see the same evidence they see.
Things like SpiderFoot or WireShark are actually publically available and not Mil-spec only items. SpiderFoot is open source for example.
Any one with a Network+ or Security+ cert would know how to do these basics such as using those programs or utilizing tracerts.
Doesn't mean that the information provided was not powerful and damning, but there's no reason to over hype it.
If anything, the teams using common tools actually adds to the veracity of their claims as they're doing things you or I can use on our own see the same evidence they see.
If they did it real-time it has to have been the professional version. It gives me hope at least.
This. Wireshark is a must-have in any networking toolkit.